Wednesday 1 December 2010

Security and productivity

An organisation that restricts access from the outside in terms of emails both in and out although best intentioned creates great delays and extended delivery times when it tries to work with outside suppliers or contractors. What happens here is an organistion that has made a decision, usually by risk people, who have not considered the consequences to the organisation as a whole.

It then begins to complain when deadlines are missed as working productivity dives for the partner as it sends its staff into the client building 200 miles away to use a PC; after of course the obligatory 6 weeks it takes to set up a new user. When companies are paying time and materials just why do they do this?

The decision may well be right; but has the downsides been discussed and agreed, or is this a risk decision made without recognition of the overall needs.

A colleague once said "the easiest job for a risk manager is to say no - the real skill in risk is in knowing when to say yes".

No comments:

Post a Comment